Known Vulnerabilities for Xh-admin-backend by Alixhan
Listed below are 10 of the newest known vulnerabilities associated with "Xh-admin-backend" by "Alixhan".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65603 json | The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation flaw in the authenticated profile... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-65600 json | Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path travers... | Not Provided | 2026-07-22 | 2026-07-23 |
| CVE-2026-63684 json | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions... | Not Provided | 2026-07-22 | 2026-07-23 |
| CVE-2026-59721 json | Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the updateInfraConfigs GraphQL mutation in admin/i... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2026-58410 json | ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the family-s... | Not Provided | 2026-07-13 | 2026-07-14 |
| CVE-2026-56281 json | Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoint where the limit parame... | Not Provided | 2026-07-12 | 2026-07-13 |
| CVE-2026-56256 json | Capgo before 12.128.2 enforces mandatory two-factor authentication only at the UI level. Sensitive Organization (ORG) managem... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-56080 json | Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Super Admin enables the policy and succ... | Not Provided | 2026-06-19 | 2026-06-24 |
| CVE-2026-55208 json | Pimcore Studio Backend Bundle is the backend bundle for Pimcore Studio. Prior to 2025.4.6 and 2026.1.6, an authenticated user... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-54021 json | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, several di... | Not Provided | 2026-06-23 | 2026-06-26 |